Vom Fachsilo Fokus zum Service Monitoring

Transkript

1 Vom Fachsilo Fokus zum Service Monitoring Urs Zumstein redq AG urs.zumstein@redq.ch 1

2 IT Monitoring Bereiche End-User Sicht Sicht Synthetische Applikations Messungen $ $ $ $ $ $ $ $ $ $ $ $ Infrastruktur Sicht SLA und BSM Sicht 2

3 Agenda Ausgangslage im DataCenter Ausgangslage am IT Markt, Vertragswerke Defizit bei aktuellen Monitoringlösungen Herausforderung personelle Ressourcen Der Weg zur Interpretation und Optimierung 3

4 Ausgangslage DataCenter Virtualisierung Die Virtualisierung ist in den meisten DataCenter auf der Serverebene vollzogen VerschiedeneDatacenter sindzurzeitdabeidie Speichervirtualisierung einzuführen Die AnzahlzuüberwachendenElementenimmtstetigzu, manuelleprüfvorgehenreichennichtmehrausum die Qualitätsicherzustellen, die personellenressourcenund die Kosten wirken begrenzend Oft sinddie heuteinstalliertenmonitoring Lösungenpro Fachsilo aufgebaut(storage, Server, Network, Application) Die Integration dersecurity-und Loginformationenin die zentrale Ueberwachung ist noch nicht realisiert 4

5 Pre-Virtual, Pre-Cloud Monitoring Pre-IT Service Monitoring Server Storage Network Application Security Fragmented silos Analytics Historical Cumbersome Difficult to scale SSH WMI SNMP Netflow JMX JDBC Logs Netflow Server Storage Network Application Security 4/26/2012 5

6 Data Center Trends Traditional Enterprise IT environment Current Days and weeks Minutes and hours Public Cloud Private cloud Future Service Provider High Velocity Constant Change Time windows compressed - days to minutes/hours Root causes vary all the time Multiple point tool integration cannot keep up Cross-domain approach is a must Services Are Multi-sourced SLA visibility in multiple environments Pervasive security challenges Enterprise IT must operate like service provider Hybrid Cloud support is the norm People driven observe and escalate Machine driven sense and respond Standards and Model-driven Enable highly analytic sense & respond systems Develop self-learning and self-healing systems Real-time analytics a core competence 4/26/2012 6

8 Konkrete(re) Leistungsdefinitionen Aktuell laufende Outsourcing Ausschreibungen beinhalten messbare Antwortzeitverhalten- und Performancekriterien : zb. Word von 1 MbyteGrösseinnert1 sec nachanklickengeöffnet Einloggen in Citrix zu 90% innert 12 sec erfolgt Antwortzeit in SAP innerhalb Modul unter 1.5 sec Antwortzeit auf Webseite ab Enduser Position pro Click kleiner 2 sec -> Der IT Vertragskunde verlangt zunehmend Performancenachweise von der internen IT oder vom Provider für die geleisteten Dienste 8

10 Was sind die Herausforderungen im DataCenter Monitoring? Das Auffinden der effektiven Ursachen von Ausfällen und Antwortzeitabweichungen verlangtnachkonstruktionskenntnissenund aufgezeichgnetenfaktenin Bezugauf die betroffenenit-services Web Apps VOIP DDos Attack? Poor Application Response Storage Security Query the App logs/stats Lab Applications Users Apps/DB Capacity? Memory Leak? VOIP Payroll Packet Trace? Systems WebConf 10 Helpdesk Networks Operations

11 Problematik heutiger Monitoring Lösungen Zu komplex, zuviele verschiedene Tools, Fachsilo orientiert realisiert Nicht konsequent in eine Servicesicht integriert KeineintegriertePrüfmethodikfürService Performance KeineTransparenzfürallean derservice Produktion beteiligten Personen Keine Möglichkeit für die Dashboardkonstruktion für Enduser vorgesehen Aufbau, Integration und Betrieb verlangt zuviel Effort 11

13 Herausforderung personelle Ressourcen Die verfügbare Arbeitszeit der Techniker wird investiert um die Monitoring Tools zu installieren und zu unterhalten Es bleibtwenigbis keine Zeit um Auswertungen und Interpretationen im Kontext der IT-Servicesicht zu realisieren Das Unternehmen hat zuwenig Profit aus dem Vorgehen, es können keine oder nur wenige Verbesserungen definiert und umgesetzt werden Das Mngtkürztdie finanziellenressourcenfürden Bereich Monitoring / Reporting da zuwenig umgesetzer Nutzen vorhanden ist, das Monitoring degradiert.. 13

15 Angebot der Firma redq AG Konzeption von Monitoring und Reportinglösungen, Realisierung bis und mit Processeinführung Integrierte Messplattform accelops für die Themen Verfügbarkeit, Performance, Security und LogFileManagement Performance Troubleshooting Support, incl. Taskforceleitung, in den folgenden Bereichen: IT Basisinfrastruktur: Storage, Network, Loadbalancer, VMWare, Citrix, Voice over IP Application Services : Workflow Systeme, Doc Mngt Anlagen, Logistik Applikationen, Versicherungsapplikationen, CallCenter Systeme 15

16 Accelops bringt die Informationen zusammen Integrated Data Center and Cloud Monitoring Software Platform Business Service Dashboard level view of each business service Business Impact Analysis Business Service Management Availability Performance SIEM Compliance Monitor health status of managed objects Real-time crosscorrelate event and matrix on security performance, availability and change Intuitive UI for rule creation Create, open, assign, change and close ticket Comprehensive application performance management Vmwarehardware and VM performance and health matrix Process level performance metrics including CPU, memory, disk activities and uptime Application level perf. metrics including DNS, DHCP, database, IIS, Apache, application server and exchange server Synthetic Transactions Monitor Collect, parse, standardize, correlate and store logs from all IT infrast. sources Collect activity logs from network devices and firework Build in customized security dashboard and reports Identity and Location Log management Built-in, comprehensive set of compliance reports covering PCI, SOX, HIPAA, ISO and COBIT for governance and auditing processes Config and Change Automatic discovery of network, server, application and user, and build CMDB Data collection from multiple sources& Inventory Management Alerts on CMDB configuration changes on 16

17 AccelOpsDifferentiation: Integration, Service Mgmt., Security Why Integrated? Eliminates blindspots, breaks silo s and enables consolidation Value Meet SLA, secure the cloud, automate chargeback, scale for service providers/large enterprise Performance/Availability (SLA) Security/Compliance Business Service Mgmt. Usage/Chargeback Landscape Knowledge Relationships: Layer 2/3, VM Layers, identity/location, infrastructure & apps to business services CMDB Cross-correlation Connecting all the dots Multi-tenancy IT Mgmt. & Security Knowledgebase: pre-defined and extensible rules, dashboards & report templates Signals Logs, Events, Metrics, Netflows, Alerts Network Module System Module VM Module App Module Security Module Env. Module Events, Logs, Configurations, User Identity, Performance Metrics, Security, Information Network Router, Switch, vlan, Gateway, Wireless System Windows, UNIX, Linux Virtualization VMware, vswitch, Storage, Hardware Application Web, database, , VOIP, DNS, Directory Security Firewall, IDS/IPS, VPN, AAA, UTM, AntiVirus Environment APC, Power, Fan, Temp 17

18 AccelOps Single Pane of Glass for IT Service Monitoring Intelligent. Proactive. Secure. Oracle SOA Intranet Storage Customer Security Network infrastructure Web server Application Servers Single pane of glass: visibility, silo breaking, remove blind spots, intelligence at your fingertips End-to-end monitoring: network, servers, applications, virtualization, security, users, services Service delivery: Increase uptime, meet SLA, secure the cloud, keep compliant, assess usage 18

19 AccelOps Platform - Key Differentiators Events: Collect, Normalize, Contextualize Raw Event Enriched Event User Application Process 9 - Eliminate house of cards integration - Add new solutions easily Reduced result set Distributed real-time cross-domain analysis Real time pattern matching Distributed MapReduce algorithms - Very rich analysis in real time - Enables easy scalability - Facilitates self-healing systems Easily extensible, native speeds Instantly scalable, built for hybrid clouds Compiled XML No performance penalty XML based extensions - Leverage for AccelOps and the community - Easily support new devices/software - No performance penalty Traditional DC Private Cloud Public Cloud - Monitor hybrid environments with ease - Scalable platform across locations, scope, solutions

20 AccelOps rapidly problem detection Rapidly see where problems exist via operational KPIs, hotpsots and alerts 20

21 Visibility for Network/Server Hardware Hardware Summary info, Disk Status, Memory Status, Power Supply Temperature, Voltage Status. 21

22 CMDB Automation for Change Management Success Automatic grouping of CMDB with network devices, servers, virtual machines, security, storage, applications, users, network segments... Information such as installed software, running applications, patches, configurations, system services, processors, hardware components 22

23 Service-Oriented Management: Proactive Monitoring and Efficient Root-cause Network connection Device Status Automatic network discovery(ip 2 nd and 3 rd layer)and layout its topology map 23

24 Service/Applications to Infrastructure Mapping Dynamic presentation of infrastructure to service relationships Easily map applications and supporting infrastructure to automate IT and business service monitoring 24

25 Identity and Location Binding Maintains Who and Where Action Record Associate IP address to names, MAC, switch vlan id, user name and directory entry, and associate location to the nearest WLAN AP, controller, VPN gateway 25

26 Comprehensive Insight Into Dynamic Virtual Environments Security Monitoring 26

27 Security Monitoring Integrated Security Information Event Management (SIEM) 27

28 Security Monitoring Praxis : Beanspruchung vom zentralen Storage TypischeFragestellungbeantwortet: WelcherService auf welcher VM beansprucht wie stark den zentralen Storage (zb. via NetApp) 28

29 Application Availability and Performance Monitoring Application level performance metrics including DNS, DHCP, databases, IIS, Apache, Application servers and exchange server Application availability and response monitoring via synthetic user transactions 29

30 Security Monitoring Praxis : Citrix ICA Transport Service Die UeberprüfungderService QualitätvomICA Transport erfolgt zentral für alle Citrix Server 30

31 Security Monitoring AccelOps for the Enterprise: All-In-One Virtual Appliance with Scale Out Architecture Org 1 AO All-in-One Virtual Appliance AO VA (S) AO VA (S) Org 2 Customer HQ AO VA (W) AO VA (W) Customer HQ *Org 3 AO Collector *Org N AO Collector * Large Enterprises 31

32 Danke für Ihre Aufmerksamkeit 32

33 Spezialfall Performance Probleme Folgende Grundlagen beschleunigen die Ursachenanalyse Design UnterlagenderGesammtanlage, zb. Storage Strategie, Naming Schemas, Security Zonen KonkreteKonstruktionspläneund Unterlagenüberdie installierten Serviceketten, Dekomposition der Serviceketten bis auf IT-Basiselemente Geeignetes Vorgehen für die Analyse Strategie Messdatenerfassung(die richtigen Werte am richtigen Ort erfassen) Interpretations KnowHow 33

34 Sample of AccelOps Customers Danish National Police 34

35 AccelOps Momentum Awards EMA Radar BSM Value Leader Network World IT Mgmt. Software Best Security Start-Up Computer Technology Review Editor s Choice: IT Mgmt. Frost & Sullivan Product Innovation: Data Center Mgmt Computer Reseller News Test Center Recommended Best of SaaS Showcase: IT Management Hot Company Awards: Hot Company 2010 Security Excellance Industry Buzz 35

36 Automated Compliance Monitoring and Reporting Security Monitoring 36